Onyx - Multiple Cross-Site Scripting Vulnerabilities

Onyx - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42446/info Onyx is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script cod...

Onyx - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42446/info Onyx is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the conte...

PostNuke FormExpress Module - Blind SQL Injection

PostNuke FormExpress Module - Blind SQL Injection Date: 17/03/2010 Software Link: http://sourceforge.net/projects/pn-formexpress/ Version: 0.3.2 PostNuke ContentExpress Module Blind Sql Injection Reported by Sharif University of Technology CSIRT Vulnerability Analysis and Penetration Testing Grou...

PostNuke ContentExpress Module Blind Sql Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ PostNuke ContentExpress Module Blind Sql Injection Vulnerability ================================================================ Date: 17/03/2010 Software Link:...

CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

Mambo Component 'com_awesom' 0.3.2 - 'listid' SQL Injection

joomla SQL Injectioncomawesom AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :"comawesom" ı changed ATATÜRK.com's db. soo dont look ATATÜRK.com db si değiştirilip kullanıcısına bildirilmiştir. EXPLOIT :...

CVE-2006-5781

Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code via a crafted DNS response...

CVE-2006-5781

The CVE-2006-5781 entry reports a stack-based buffer overflow in the handshake function of iodine 0.3.2 , enabling remote attackers to execute arbitrary code via a crafted DNS response. This is a network-based vulnerability with a base score 7.5 (HIGH) and no authentication required, affecting th...